This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: 7jpruPlL2KX05Tdj0Yu3KKaDRxi46fGMCLjQDHAIaEw= Subject key identifier: A5:CE:A2:19:ED:22:83:B8:09:FE:AF:34:F4:09:20:EF:5F:CB:CA:7F Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: 40 Signing time: Fri 19 Dec 2025 06:32:18 +0000 Manifest this update: Fri 19 Dec 2025 06:32:18 +0000 Manifest next update: Fri 26 Dec 2025 06:32:18 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: W/bRsHLVZhONCVywd7vUDwS0WsP9Nr5YfF4gbJA3zJk=) 2: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: 4kagDiDwOK9DDKuYrOZLBx4t6wG2YIBPDsR0s/PYy+4=) 3: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: pfN97xtI/DeRbJop2c9X92MygEUcxnLoB0XTR1dIrkw=) 4: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: IiWhGRsjXczChP0MmoTW9Pkoc+QqwLTQPacvlkuiXu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Dec 19 06:32:18 2025 GMT Not After : Dec 26 06:32:18 2025 GMT Subject: CN=6944f172-d82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:f0:56:24:36:1b:c8:70:0c:c6:a5:98:96: d9:8e:f0:c2:c2:f4:51:d6:b7:66:3e:cd:7c:47:f8: e1:95:03:4b:06:1a:a8:65:bb:c6:be:4e:f6:44:41: 82:e7:4b:9e:22:62:a4:b9:ad:5f:b3:e0:04:11:89: 05:4b:f5:fa:b9:b1:0d:53:e7:73:f5:fd:0a:8f:3c: 88:44:66:f2:c4:c3:ed:ec:4b:26:fe:81:39:33:03: 4e:6f:83:5b:bb:5e:fd:a0:91:a7:d3:62:ff:e2:5e: e0:0a:7b:c6:3f:bb:68:ad:d0:50:18:7d:e5:3e:61: 6b:76:5f:28:46:76:a6:ce:43:74:f2:cb:0b:cc:8d: b7:5a:67:e0:a7:b2:82:ef:59:01:60:3a:cb:c2:5e: 9c:c4:9b:30:91:80:a5:e7:3b:8f:eb:18:15:a8:5e: c2:02:a2:48:16:11:00:f5:4d:f2:a5:a3:51:0f:e3: 7f:0d:50:61:c8:e0:65:39:38:d1:b2:05:4d:aa:06: 4c:87:2d:94:fd:8b:93:3a:a0:6d:dc:5a:65:22:82: d1:ae:70:ce:3f:2e:be:90:73:6c:e9:82:5f:73:28: 3e:d5:4a:21:21:88:df:ef:0a:b4:98:0a:cf:5f:b5: 3b:24:b1:f2:59:61:4d:78:bd:0e:70:4e:00:5b:4e: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CE:A2:19:ED:22:83:B8:09:FE:AF:34:F4:09:20:EF:5F:CB:CA:7F X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0e:91:d7:66:e7:a6:a9:2c:d3:33:b0:fd:b1:25:c9:fe:26: 48:d5:f2:61:ab:a0:90:5d:cb:f1:d6:15:51:62:5a:48:fa:c0: 9d:b9:74:d1:9a:25:da:11:c7:52:2d:bb:d7:9c:7f:ab:3f:f7: b9:69:2b:34:7b:b8:2f:03:4e:eb:bd:63:ce:7a:8f:41:50:18: ac:e1:ce:73:77:71:6c:a3:d4:88:e9:7f:50:28:2f:aa:7d:44: 38:a9:c4:8c:24:54:a8:c7:a5:dc:50:16:33:58:42:2d:0f:1a: 9e:cd:53:8d:5b:9a:2e:ca:6b:a4:ee:41:fd:c6:67:88:4c:e4: f1:ad:cb:74:35:2f:db:89:a5:d6:11:c8:3a:3e:9d:35:2b:1f: ad:44:09:cb:be:ed:58:49:1f:ea:04:82:63:05:f9:1d:ce:7a: 43:d4:8e:8a:13:03:bc:b4:4e:e5:ff:9f:93:7b:57:85:eb:0e: ee:01:9e:83:a6:74:70:27:4a:23:28:0e:fe:6a:b6:c5:17:70: 1e:08:49:85:28:59:52:58:80:e9:f1:1f:6e:83:3b:c3:0c:c0: e6:0c:7e:32:16:4d:5e:39:9b:e1:f3:e7:e2:7a:95:c7:c1:27: 3f:ce:79:5c:63:61:3b:a0:fd:45:b2:77:b2:49:7d:e2:8b:0a: 75:dd:f0:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2 MkZEMDFBRjAeFw0yNTEyMTkwNjMyMThaFw0yNTEyMjYwNjMyMThaMBgxFjAUBgNV BAMMDTY5NDRmMTcyLWQ4MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBFfBWJDYbyHAMxqWYltmO8MLC9FHWt2Y+zXxH+OGVA0sGGqhlu8a+TvZEQYLn S54iYqS5rV+z4AQRiQVL9fq5sQ1T53P1/QqPPIhEZvLEw+3sSyb+gTkzA05vg1u7 Xv2gkafTYv/iXuAKe8Y/u2it0FAYfeU+YWt2XyhGdqbOQ3TyywvMjbdaZ+CnsoLv WQFgOsvCXpzEmzCRgKXnO4/rGBWoXsICokgWEQD1TfKlo1EP438NUGHI4GU5ONGy BU2qBkyHLZT9i5M6oG3cWmUigtGucM4/Lr6Qc2zpgl9zKD7VSiEhiN/vCrSYCs9f tTsksfJZYU14vQ5wTgBbTgJFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpc6iGe0i g7gJ/q809Akg71/Lyn8wHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3 NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RDFGL0FEMjAyMUE0OTc3NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tP STZQeHBkWThFV1dMOUFhOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMIOkddm56apLNMzsP2xJcn+JkjV8mGroJBdy/HWFVFiWkj6wJ25dNGa JdoRx1Itu9ecf6s/97lpKzR7uC8DTuu9Y856j0FQGKzhznN3cWyj1Ijpf1AoL6p9 RDipxIwkVKjHpdxQFjNYQi0PGp7NU41bmi7Ka6TuQf3GZ4hM5PGty3Q1L9uJpdYR yDo+nTUrH61ECcu+7VhJH+oEgmMF+R3OekPUjooTA7y0TuX/n5N7V4XrDu4BnoOm dHAnSiMoDv5qtsUXcB4ISYUoWVJYgOnxH26DO8MMwOYMfjIWTV45m+Hz5+J6lcfB Jz/OeVxjYTug/UWyd7JJfeKLCnXd8A0= -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:58 2025 by rpki-client